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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 
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DETAILED ACTION 

1 . In view of the Appeal Brief filed on 1 1/1 8/2008, PROSECUTION IS HEREBY 
REOPENED. A new ground of rejection is set forth below. 

To avoid abandonment of the application, appellant must exercise one of the following 
two options: 

(1) file a reply under 37 CFR 1.111 (if this Office action is non-final) or a reply under 37 
CFR 1.113 (if this Office action is final); or, 

(2) initiate a new appeal by filing a notice of appeal under 37 CFR 41 .31 followed by an 
appeal brief under 37 CFR 41.37. The previously paid notice of appeal fee and appeal brief fee 
can be applied to the new appeal. If, however, the appeal fees set forth in 37 CFR 41.20 have 
been increased since they were previously paid, then appellant must pay the difference between 
the increased fees and the amount previously paid. 

A Supervisory Patent Examiner (SPE) has approved of reopening prosecution by signing 

below: 

/Gilberto Barron Jr./ 
Supervisory Patent Examiner, Art Unit 2432 

Response to Arguments 

2. Applicant's arguments with respect to claims 1-28 and 30-35 have been considered but 
are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 102 
1 . The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 
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(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

2. Claims 1-28 and 30-36 are rejected under 35 U.S.C. 102(e) as being anticipated by 

Riddick et al. (US-20030046568) 

a. Re ferring to claim 1, 1 1, 17, 19, 28 and 36: 

Regarding claim 1 and similar claims 11, 17, 19, 28 and 36, Riddick teaches a secure 
token for use with an encrypted file and an insecure decryption device, the secure token 
comprising a processor for protecting a first cryptographic key against unauthorized access, and 
creating a second cryptographic key from the first key and a message unique to the insecure 
device, the second key usable for file decryption by the insecure device (Abstract and Para 49, 61 
and 70-74 teaches a smart token for protecting the unique key (Media encryption key) and a 
second key encrypted using the public key or message (PDI, player digital ID unique to the 
player) of the player wherein the second key is used by the player to decrypt the content), 
a. Referring to claim 2, 30 and 31: 

Regarding claim 2 and similar claims 30 and 3 1 , Riddick teaches the secure token of 
claim 1, wherein the secure token includes a smart card, the smart card including the processor 
(Para 61.... Smart token), 
a. Referring to claim 3 and 20: 

Regarding claim 3 and similar claim 20, Riddick teaches the secure token of claim 1, 
wherein the processor uses a hash function to create the second key from the message and the 
first key (Para 65 ... . Encrypting the first key and the PDI (player info) to create the second key), 
a. Referring to claim 4, 12, 18, 21 and 33: 
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Regarding claim 4 and similar claims 12, 18, 21 and 33, Riddick teaches the secure token 
of claim 1 , wherein the secure token performs an electronic transaction to obtain the first key 
(Para 61 . . . Key transferred at purchase), 
a. Referring to claim 5, 13 and 22: 

Regarding claim 5 and similar claims 13 and 22, Riddick teaches the secure token of 
claim 4, wherein the secure token conducts a transaction with a server to purchase a desired file; 
and wherein the secure token receives the first key from the server (Para 61 and 67). 
a. Referring to claim 6, 7, 14, 15, 23, 24 and 35: 

Regarding claim 6 and similar claims 7, 14, 15, 23, 24 and 35, Riddick teaches the secure 
token of claim 4, wherein the secure token conducts a transaction with a peer to purchase a file; 

and wherein the secure token receives the first key from the peer (Para 82-83 transaction 

(purchase or sell), smart token in peer player or device transfers key to smart token of a receiving 
player). 

a. Re ferring to claim 8, 16 and 25: 

Regarding claim 8 and similar claims 16 and 25, Riddick teaches the secure token of 
claim 7, wherein the secure token creates a third key that is unique to the peer, and sends the 
third key to the insecure device and the peer (Para 84). 
a. Referring, to claim 9: 

Regarding claim 9, Riddick teaches the secure token of claim 1, further comprising 
means for receiving the first key and encrypted data, wherein the insecure device uses the second 
key to decrypt the encrypted data (Para 70-71 . ... Decrypting encrypted data), 
a. Referring to claim 10 and 34: 
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Regarding claim 10 and similar claim 34, Riddick teaches the secure token of claim 1, 
wherein processing power of the secure token is significantly less than processing power of the 

insecure device (Para 70 secure token (smart token) has less processing power than insecure 

device, (Player)). 

a. Referring to claim 26: 

Regarding claim 26, Riddick teaches an insecure decryption device for use with a secure 
device and a first cryptographic key, the device comprising: 

means for sending a message to the secure device, the message unique to the insecure device; 
means for receiving a second cryptographic key from the secure device, the second 
cryptographic key derived from the message and the first cryptographic key; and 

means for performing decryption with the second cryptographic key (Para 70-75 player is the 

insecure device and means for sending its PDI to the secure device (smart token), player receives 
a decryption key from the smart token used in decrypting media), 
a. Referring to claim 27: 

Regarding claim 27, Riddick teaches the device of claim 26, further comprising means 
for playing media decrypted with the second cryptographic key (Para 70). 
a. Referring to claim 32: Regarding claim 32, Riddick teaches the system of claim 3 1 , 
wherein the insecure device includes a media player (Para 70). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to IZUNNA OKEKE whose telephone number is (571)270-3854. 
The examiner can normally be reached on 9:00am - 5:00pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571) 272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/I. O.I 

Examiner, Art Unit 2432 



/Gilberto Barron Jr./ 

Supervisory Patent Examiner, Art Unit 2432 



